CVE-2007-1564

Konqueror 3.5.5 - Exposure of Sensitive Information via FTP PASV Response

Title source: llm
STIX 2.1

Exploitation Summary

EIP tracks 1 public exploit for CVE-2007-1564. PoCs published by mark.

AI-analyzed exploit summary The provided text describes a vulnerability in KDE Konqueror (CVE-2007-1564) that allows arbitrary TCP port connections, potentially leaking sensitive service information. It references an external exploit archive but does not contain functional exploit code.

Description

The FTP protocol implementation in Konqueror 3.5.5 allows remote servers to force the client to connect to other servers, perform a proxied port scan, or obtain sensitive information by specifying an alternate server address in an FTP PASV response.

Exploits (1)

exploitdb WRITEUP VERIFIED
by mark · textremotelinux
https://www.exploit-db.com/exploits/29770

The provided text describes a vulnerability in KDE Konqueror (CVE-2007-1564) that allows arbitrary TCP port connections, potentially leaking sensitive service information. It references an external exploit archive but does not contain functional exploit code.

Classification
Writeup 90%
Attack Type
Info Leak
Complexity
Trivial
Reliability
Theoretical
Target: KDE Konqueror (version not specified)
No auth needed
Prerequisites: Victim must visit a malicious webpage or open a crafted file in Konqueror
devstral-2 · analyzed Feb 16, 2026 Full analysis →

References (13)

Core 13
Core References
Various Sources x_refsource_confirm
http://www.kde.org/info/security/advisory-20070326-1.txt
Vendor Advisory vendor-advisory x_refsource_redhat
http://www.redhat.com/support/errata/RHSA-2007-0909.html
Issue Tracking x_refsource_confirm
https://issues.rpath.com/browse/RPL-1201
Vendor Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/24889
Vendor Advisory vendor-advisory x_refsource_ubuntu
http://www.ubuntu.com/usn/usn-447-1
Third Party Advisory, VDB Entry vdb-entry signature x_refsource_oval
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10646
Vendor Advisory vendor-advisory x_refsource_suse
http://www.novell.com/linux/security/advisories/2007_6_sr.html
Vendor Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/27108
Third Party Advisory, VDB Entry vdb-entry x_refsource_sectrack
http://securitytracker.com/id?1017801
Third Party Advisory, VDB Entry vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/23091
Vendor Advisory vdb-entry x_refsource_vupen
http://www.vupen.com/english/advisories/2007/1076
Vendor Advisory vendor-advisory x_refsource_mandriva
http://www.mandriva.com/security/advisories?name=MDKSA-2007:072

Scores

EPSS 0.0378
EPSS Percentile 88.5%

Details

CWE
CWE-200
Status published
Products (1)
kde/konqueror 3.5.5
Published Mar 21, 2007
Tracked Since Feb 18, 2026